superrob1500
/
mirror-linux
mirror of https://github.com/torvalds/linux
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
mirror-linux/net
History
Vlad Buslov df25455e5a netfilter: nf_conntrack: allow early drop of offloaded UDP conns 
Both synchronous early drop algorithm and asynchronous gc worker completely
ignore connections with IPS_OFFLOAD_BIT status bit set. With new
functionality that enabled UDP NEW connection offload in action CT
malicious user can flood the conntrack table with offloaded UDP connections
by just sending a single packet per 5tuple because such connections can no
longer be deleted by early drop algorithm.

To mitigate the issue allow both early drop and gc to consider offloaded
UDP connections for deletion.

Signed-off-by: Vlad Buslov <vladbu@nvidia.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
 		2023-02-03 09:31:24 +00:00
..
6lowpan
…
9p xen: branch for v6.2-rc4 2023-01-12 17:02:20 -06:00
802 treewide: Convert del_timer*() to timer_shutdown*() 2022-12-25 13:38:09 -08:00
8021q
…
appletalk
…
atm
…
ax25
…
batman-adv batman-adv: tvlv: prepare for tvlv enabled multicast packet type 2023-01-21 19:01:59 +01:00
bluetooth net/sock: Introduce trace_sk_data_ready() 2023-01-23 11:26:50 +00:00
bpf bpf/selftests: Verify struct_ops prog sleepable behavior 2023-01-25 10:25:57 -08:00
bpfilter
…
bridge Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-02-02 14:49:55 -08:00
caif caif: don't assume iov_iter type 2023-01-13 20:44:20 -08:00
can can: isotp: split tx timer into transmission and timeout 2023-02-02 10:33:26 +01:00
ceph net/sock: Introduce trace_sk_data_ready() 2023-01-23 11:26:50 +00:00
core Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-02-02 14:49:55 -08:00
dcb net: dcb: add helper functions to retrieve PCP and DSCP rewrite maps 2023-01-20 09:33:22 +00:00
dccp
…
devlink devlink: rename and reorder instances of struct devlink_cmd 2023-02-01 10:57:01 -08:00
dns_resolver
…
dsa net: dsa: Use sysfs_emit() to instead of sprintf() 2023-02-02 15:28:59 +01:00
ethernet
…
ethtool ethtool: netlink: convert commands to common SET 2023-01-27 12:24:32 +00:00
hsr
…
ieee802154
…
ife
…
ipv4 tcp: add TCP_MINTTL drop reason 2023-02-02 21:14:50 -08:00
ipv6 tcp: add TCP_MINTTL drop reason 2023-02-02 21:14:50 -08:00
iucv
…
kcm net/sock: Introduce trace_sk_data_ready() 2023-01-23 11:26:50 +00:00
key
…
l2tp l2tp: prevent lockdep issue in l2tp_tunnel_register() 2023-01-18 14:44:54 +00:00
l3mdev
…
lapb
…
llc
…
mac80211 wifi: mac80211: drop extra 'e' from ieeee80211... name 2023-01-19 14:57:51 +01:00
mac802154 mac802154: Fix possible double free upon parsing error 2022-12-19 11:38:12 +01:00
mctp net: mctp: purge receive queues on sk destruction 2023-01-28 00:26:09 -08:00
mpls
…
mptcp mptcp: userspace pm: use a single point of exit 2023-01-26 13:33:30 +01:00
ncsi
…
netfilter netfilter: nf_conntrack: allow early drop of offloaded UDP conns 2023-02-03 09:31:24 +00:00
netlabel
…
netlink netlink: annotate data races around sk_state 2023-01-23 21:35:53 -08:00
netrom netrom: Fix use-after-free caused by accept on already connected socket 2023-01-30 07:30:47 +00:00
nfc net: nfc: Fix use-after-free in local_cleanup() 2023-01-13 20:53:44 -08:00
nsh
…
openvswitch Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-02-02 14:49:55 -08:00
packet packet: add TP_STATUS_GSO_TCP for tp_status 2023-02-01 20:54:27 -08:00
phonet net/sock: Introduce trace_sk_data_ready() 2023-01-23 11:26:50 +00:00
psample
…
qrtr Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-02-02 14:49:55 -08:00
rds net: add missing includes of linux/sched/clock.h 2023-01-27 11:19:46 +00:00
rfkill Merge wireless into wireless-next 2023-01-17 13:36:25 +02:00
rose net/rose: Fix to not accept on connected socket 2023-01-28 00:19:57 -08:00
rxrpc rxrpc: Kill service bundle 2023-01-31 16:38:35 +00:00
sched net/sched: act_ct: offload UDP NEW connections 2023-02-03 09:31:24 +00:00
sctp Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-02-02 14:49:55 -08:00
smc net: add missing includes of linux/splice.h 2023-01-27 11:19:46 +00:00
strparser
…
sunrpc net/sock: Introduce trace_sk_data_ready() 2023-01-23 11:26:50 +00:00
switchdev
…
tipc net/sock: Introduce trace_sk_data_ready() 2023-01-23 11:26:50 +00:00
tls Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net 2023-02-02 14:49:55 -08:00
unix net: add missing includes of linux/splice.h 2023-01-27 11:19:46 +00:00
vmw_vsock virtio/vsock: replace virtio_vsock_pkt with sk_buff 2023-01-16 13:26:33 +00:00
wireless wifi: wireless: deny wireless extensions on MLO-capable devices 2023-01-19 20:01:41 +02:00
x25 net/x25: Fix to not accept on connected socket 2023-01-25 09:51:04 +00:00
xdp
…
xfrm netlink: provide an ability to set default extack message 2023-02-01 21:04:09 -08:00
Kconfig
…
Kconfig.debug
…
Makefile devlink: move code to a dedicated directory 2023-01-05 22:12:00 -08:00
compat.c
…
devres.c
…
socket.c sock: add tracepoint for send recv length 2023-01-13 10:25:10 +00:00
sysctl_net.c
…